Managed User

Manage users that the product controls.

📄️Start managing several accounts

Makes each listed host user or credential a managed account. Each entry needs a userId or a credentialId. Entries the caller is not permitted to manage, accounts that are already managed, and accounts that sign in to Privilege Secure are not managed, and the response gives the number that succeeded and the number that did not.

📄️Get the managed user for a host user

Returns the managed user record that belongs to the given host user. Use it to find out whether a host user account is managed and how.

📄️Stop managing several accounts

Removes the listed managed users so the accounts are no longer managed, and removes their scheduled jobs. Entries the caller is not permitted to unmanage and entries that no longer exist are skipped. For accounts managed through a resource group, the managed user record is still removed, but the scheduled jobs, the credential and the host user are left as they are. The response gives two counts, but the first count reflects the records the call changed rather than strictly the number of accounts, so check the accounts afterward if you need an exact result.

📄️Verify passwords for managed accounts

Schedules a verification job for each listed account to check that the stored password still works. The response gives the number scheduled and the number not scheduled.

📄️Stop managing an account, optionally removing its host user

Removes the managed user record so the account is no longer managed. It also removes the account's scheduled jobs, marks the host user as not managed, and, for accounts without dependencies, renames the stored credential and removes it from credential access policies. If the account is managed through a resource group, those other steps are skipped, but the managed user record is still removed and the call returns 200. When deleteHostUser is true, the host user record linked to it is also marked as deleted. Returns the id that was passed in.